VULNERABILITY INTELLIGENCE

CVE-2017-1085

CVSS score7.8 HIGH

EPSS probability1.85%

CISA KEVNot currently listed

Published2018-09-12

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

In FreeBSD before 11.2-RELEASE, an application which calls setrlimit() to increase RLIMIT_STACK may turn a read-only memory region below the stack into a read-write region. A specially crafted executable could be exploited to execute arbitrary code in the user context.

Weakness classification

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Primary references

secteam@freebsd.org — Third Party Advisory, VDB Entry
secteam@freebsd.org — Exploit, Technical Description, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Technical Description, Third Party Advisory